
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.mft
File: v49Do1Dk9qJgvwPtS9_BqB2itaE.mft (raw, json)
Hash identifier: BvedirU1ACq1TtUgeKPnB8BWUuYOE3Tp5N4vP9fJ4tk=
Subject key identifier: BE:E5:3C:20:BA:C2:31:BF:DF:4C:47:0B:22:14:B0:35:EA:F3:5D:64
Authority key identifier: BF:8F:43:A3:50:E4:F6:A2:60:BF:03:ED:4B:DF:C1:A8:1D:A2:B5:A1
Certificate issuer: /CN=A91FAB62/serialNumber=BF8F43A350E4F6A260BF03ED4BDFC1A81DA2B5A1
Certificate serial: 070E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v49Do1Dk9qJgvwPtS9_BqB2itaE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.mft
Manifest number: 06EA
Signing time: Mon 02 Mar 2026 01:30:38 +0000
Manifest this update: Mon 02 Mar 2026 01:30:36 +0000
Manifest next update: Mon 09 Mar 2026 01:30:36 +0000
Files and hashes: 1: v49Do1Dk9qJgvwPtS9_BqB2itaE.crl (hash: lE8dIpdc99qu6K82OCsigMuKDJvqKVJ9uBojv9cMgp4=)
2: 606DB4B298D111EB84F5A23CC4F9AE02.roa (hash: O1kmZoqTlQT/TkmiqJdJvDi53F0+wcVvv/mT2oSQ4sQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.crl
rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v49Do1Dk9qJgvwPtS9_BqB2itaE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1806 (0x70e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FAB62, serialNumber=BF8F43A350E4F6A260BF03ED4BDFC1A81DA2B5A1
Validity
Not Before: Mar 2 01:30:36 2026 GMT
Not After : Mar 9 01:30:36 2026 GMT
Subject: CN=69a4e83d-c113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:be:9e:25:20:d6:e0:8a:21:0f:4e:a5:72:b2:
77:a1:91:ee:b5:b5:c8:f9:00:7c:99:76:2d:89:93:
b8:cd:f5:3e:1b:06:38:c9:9b:ac:3d:3e:8e:c9:c5:
7f:aa:06:28:33:d9:d0:7d:40:75:fd:79:7a:24:16:
cd:bb:0f:c2:a1:4d:de:45:f9:09:2a:eb:cf:fb:b3:
97:59:44:9c:5a:dc:87:30:e4:6e:6b:77:ce:44:d9:
44:c4:5b:e6:35:f5:02:45:9f:19:9f:2d:05:48:6a:
0f:78:b2:c5:ed:67:de:f3:1a:9f:2c:ec:58:9b:0a:
0d:7e:34:c8:66:ec:ea:79:33:93:1c:75:1f:e6:a6:
17:8c:e4:7a:f9:6f:36:1d:91:d3:7e:72:63:16:af:
4b:15:c6:88:81:93:76:6a:07:41:7b:51:9d:9a:e1:
fb:e6:0e:f2:25:08:3b:c3:d2:38:36:14:53:e3:a2:
7e:4f:50:63:c1:13:a2:58:27:ca:a5:d1:26:0e:c9:
66:cf:f7:9e:bf:d2:5a:fa:45:7a:f3:82:8e:61:c0:
0a:2f:ce:51:5a:13:97:80:fa:dd:26:e2:67:af:9f:
ff:74:b2:fa:4c:6b:75:e3:95:46:b4:d4:70:d3:b6:
48:34:62:8a:84:11:e0:54:07:b2:22:cd:31:c9:47:
75:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E5:3C:20:BA:C2:31:BF:DF:4C:47:0B:22:14:B0:35:EA:F3:5D:64
X509v3 Authority Key Identifier:
keyid:BF:8F:43:A3:50:E4:F6:A2:60:BF:03:ED:4B:DF:C1:A8:1D:A2:B5:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v49Do1Dk9qJgvwPtS9_BqB2itaE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:f3:d8:e2:8c:f0:ad:7d:0b:fa:00:ed:14:3f:c6:cf:37:ad:
df:bb:9f:3c:31:1e:38:9a:86:ec:82:8a:1e:a6:cb:46:65:62:
07:ec:78:81:a0:cc:df:31:65:89:84:b9:85:90:12:49:2a:5c:
2a:20:7e:c3:dc:4b:04:73:55:1d:12:9d:4d:bd:c7:29:ce:ec:
fb:8f:a2:a2:65:d1:80:42:7c:54:3f:83:de:15:0d:4f:72:4e:
8b:15:be:09:fc:8a:0d:9b:2a:91:49:96:01:b1:42:a2:67:4b:
37:09:ec:c1:4b:e5:ee:6a:04:e2:56:3e:62:bb:10:f1:1a:6d:
58:34:60:c9:6c:f5:9e:64:48:1f:0a:ba:e3:3a:20:7e:13:fe:
6c:64:ca:d3:98:aa:02:36:ce:09:26:92:86:ac:d0:72:a6:f2:
07:f1:50:b7:0e:06:dd:d2:58:fe:bb:49:f2:d3:11:cc:45:e8:
3d:ee:eb:9e:14:e9:f5:3e:ca:eb:c5:43:48:b5:be:5c:41:38:
cc:a5:2c:66:80:41:bb:f9:7a:90:72:19:08:64:bc:97:d3:a3:
dc:84:f2:59:51:a0:b8:74:30:1d:35:4f:9f:84:e9:fe:95:14:
7b:ed:a1:54:0b:1e:d1:d7:ff:7d:5c:af:db:1c:af:91:85:73:
61:14:76:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:57:34 2026 by rpki-client